Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/9f496cc6951c267925bb8b66eb1df5285466d027.roa
File:                     9f496cc6951c267925bb8b66eb1df5285466d027.roa (raw, json)
Hash identifier:          F3xJ8GI2geFS/Co4uqSkBIFam2XSUZOlc0AdBvpY4f0=
Subject key identifier:   03:F0:67:E6:36:F5:DF:C9:AE:CA:C3:8D:6D:3C:47:40:A5:B7:B4:A9
Certificate issuer:       /CN=297e119ebe51a00d6560ab73fd79c51ada403f19
Certificate serial:       266F
Authority key identifier: 07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/9f496cc6951c267925bb8b66eb1df5285466d027.roa
Signing time:             Fri 19 Aug 2022 16:22:17 +0000
ROA not before:           Fri 19 Aug 2022 16:21:11 +0000
ROA not after:            Mon 19 Aug 2024 16:21:11 +0000
asID:                     27823
IP address blocks:        2800:6c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9839 (0x266f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=297e119ebe51a00d6560ab73fd79c51ada403f19
        Validity
            Not Before: Aug 19 16:21:11 2022 GMT
            Not After : Aug 19 16:21:11 2024 GMT
        Subject: CN=9f496cc6951c267925bb8b66eb1df5285466d027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:48:55:8b:7f:12:6b:a7:37:c0:1d:1b:8c:74:
                    94:13:1e:01:87:5f:2b:74:ca:cd:b9:70:fa:06:9e:
                    52:83:14:6c:bc:c5:d2:5e:a9:eb:1c:e8:ff:5c:8a:
                    60:cf:7d:22:5f:23:97:6e:0a:33:30:cc:da:1c:79:
                    6a:72:e2:53:50:3a:de:df:6a:53:3b:ab:55:15:1d:
                    fa:99:d1:18:ca:3e:97:ee:f7:9b:ed:c4:15:57:c3:
                    e7:8e:ea:36:1c:65:73:ad:7b:cd:0b:52:d0:7a:a9:
                    3e:3a:40:9c:c3:86:a1:c5:d1:56:5d:8e:f1:f5:1d:
                    7b:d8:62:86:cd:75:1a:82:a2:06:25:ae:66:85:6b:
                    75:34:7e:f7:6d:f1:85:51:64:cb:d1:53:12:43:fe:
                    8f:f4:41:97:f1:c6:3f:e8:df:29:0b:8c:8d:9c:4d:
                    7c:b4:40:e6:c6:2d:c3:90:c9:bb:dd:be:c4:52:c0:
                    79:25:c4:bf:63:b0:f5:93:b2:26:df:38:6f:1a:fa:
                    90:be:16:56:a9:6c:19:1f:11:42:1e:52:84:02:0c:
                    1d:c8:c7:b7:1d:1a:d5:08:f7:bb:ad:33:fa:07:0c:
                    e2:94:3c:02:ba:77:e9:5f:93:fb:cd:4a:52:25:7a:
                    29:07:7c:d4:a9:d5:50:27:7d:4c:e4:74:e9:54:29:
                    17:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F0:67:E6:36:F5:DF:C9:AE:CA:C3:8D:6D:3C:47:40:A5:B7:B4:A9
            X509v3 Authority Key Identifier:
                keyid:07:09:37:88:ED:4A:80:C2:0C:DE:CE:10:A7:FF:BB:31:21:A2:72:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/297e119ebe51a00d6560ab73fd79c51ada403f19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/9f496cc6951c267925bb8b66eb1df5285466d027.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d8df0f0-41c4-401d-ac15-de0db40ac9cb/297e119ebe51a00d6560ab73fd79c51ada403f19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:59:1f:d1:a1:18:52:01:30:06:f7:20:91:48:0a:40:1d:17:
         37:2b:b9:23:a4:ee:8b:fc:f6:4b:5c:66:7b:5f:60:72:51:f7:
         7a:e2:82:03:33:ff:54:92:0c:02:de:bc:0c:ec:2f:5f:a7:a3:
         f3:91:e5:9e:91:21:bf:72:9b:c8:fb:29:74:37:a3:84:e3:a9:
         0b:90:c4:3f:bb:e4:46:19:c6:ce:12:8f:74:23:83:fd:38:b3:
         8d:33:42:73:73:61:1a:b6:7a:fe:a9:56:d9:fa:97:5f:2d:f4:
         af:c4:08:58:e2:5f:20:34:a6:11:32:3f:06:07:ae:38:f8:ae:
         d6:3c:e1:c8:a1:de:89:db:4c:bd:11:64:16:ed:da:69:50:38:
         df:79:0d:b6:15:bb:1e:ac:96:eb:b6:cf:a6:7e:4c:8b:b2:cc:
         0b:43:3d:bb:2b:73:76:57:f6:00:f1:6b:51:1e:27:8a:a3:f3:
         26:ee:01:05:a8:57:43:86:4f:ca:6a:5d:0e:47:32:50:65:e3:
         ff:b3:bd:b6:ba:bd:29:d4:12:9c:85:8f:8c:0f:bc:b8:1b:06:
         f8:ce:6b:17:d9:bc:e6:88:e1:08:be:70:36:22:91:4a:0d:1d:
         cc:2c:52:b2:93:d7:6c:a6:53:62:9c:50:ec:1e:88:44:55:fd:
         69:35:df:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----